1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-27 04:49:34 +03:00

Commit Graph

  • 2c6261d1a8 Add testing for cryptocb only for aes ofb and cfb night1rider 2026-06-23 10:04:18 -06:00
  • d09803154b Adding callbacks for AES mode OFB and CFB, along with callback testing/coverage for the callback paths night1rider 2026-06-18 16:32:04 -06:00
  • 661a6d0bf6 Change API const in .h instead of .c Anthony Hu 2026-07-07 15:04:39 -04:00
  • bf3103c336 C89 compliance items Anthony Hu 2026-07-07 14:06:41 -04:00
  • e1ff608876 Intel QAT: add async hybrid PQC server key share regression test David Garske 2026-06-30 10:00:00 -07:00
  • d929c9b88a Intel QAT: serialize build/check under --with-intelqa; update port README David Garske 2026-06-29 11:00:01 -07:00
  • 673a6703b1 Intel QAT: interleave instances across devices for multi-device utilization David Garske 2026-06-29 10:59:55 -07:00
  • f7c5256d36 Intel QAT: fix heap argument in RSA public free David Garske 2026-06-29 10:59:55 -07:00
  • fa9dd0a671 Intel QAT: fall back to regular memory when crypto service not started David Garske 2026-06-29 10:59:35 -07:00
  • cf8048baab Fix Cavium async event queue req_count buffer overflow David Garske 2026-06-29 10:59:13 -07:00
  • 0041fa430e Fix TLS 1.3 hybrid PQC server key share dropped under async crypt David Garske 2026-06-29 10:59:13 -07:00
  • 1a144b69bd x509_str.c: gate pathLen decrement on isCa Tobias Frauenschläger 2026-06-19 11:03:41 +02:00
  • 54e20016cd x509_str.c: fix partial-chain double-push and rework pathLen tests Tobias Frauenschläger 2026-06-19 10:12:48 +02:00
  • 3143ae0d75 Refactor to allow maxPathLen set to WOLFSSL_MAX_PATH_LEN. Kareem 2026-06-18 15:18:26 -07:00
  • cc78d130c4 X509 validation fixes Tobias Frauenschläger 2026-06-18 15:17:01 -07:00
  • 833e360ccd fixes for issues identified by CI tests and AI review: Daniel Pouzzner 2026-07-07 02:35:51 -05:00
  • 3965993c6d wolfssl/wolfcrypt/types.h: in fallback definition of DISABLE_VECTOR_REGISTERS(), return NOT_COMPILED_IN rather than (-1), for clarity and traceability. Daniel Pouzzner 2026-07-07 00:19:11 -05:00
  • 5cee8bec39 wolfcrypt/src/rng_bank.c: * refactor rng_bank.refcount management using wolfSSL_RefInc_IfAtLeast() and wolfSSL_RefDec_IfEquals(), to mitigate deallocation races. * in wc_rng_bank_init(), fail fast for non-retryable errors. * in wc_rng_bank_init(), wc_rng_bank_checkout(), and wc_rng_bank_inst_reinit(), consistently treat timeout_secs==0 as dont-wait, and timeout_secs<0 as wait-forever if wc_rng_bank_init() or flags & WC_RNG_BANK_FLAG_CAN_WAIT. * in wc_rng_bank_checkout(), fix affinity dynamics to recompute after possible sleep, or drop affinity attempts entirely if using WC_RNG_BANK_FLAG_CAN_FAIL_OVER_INST strategy. Daniel Pouzzner 2026-07-07 00:18:42 -05:00
  • 0fdceafe6b wolfcrypt/src/wc_port.c, wolfssl/wolfcrypt/wc_port.h: * implement wolfSSL_RefInc_IfAtLeast() and wolfSSL_RefDec_IfEquals(). * implement wolfSSL_RefWithMutexInc_IfAtLeast() and wolfSSL_RefWithMutexDec_IfEquals(). Daniel Pouzzner 2026-07-07 00:18:27 -05:00
  • bd977dc0b9 linuxkm/lkcapi_ecdsa_glue.c and linuxkm/lkcapi_glue.c: implement support for ECDSA verify on kernel 6.13+ (struct sig_alg API). Daniel Pouzzner 2026-07-07 00:16:51 -05:00
  • 09db3a6410 linuxkm/linuxkm_wc_port.h: * set up WC_LINUXKM_HAVE_SELFTEST and WC_LINUXKM_HAVE_SELFTEST_FULL early. * replace the forced-downgrade from FIPS 186-5 to 186-4 for SHA-1 support, with a #error if configuration is incompatible. Daniel Pouzzner 2026-07-07 00:15:54 -05:00
  • 12272e1c06 wolfssl/wolfcrypt/hash.h, src/internal.c, src/pk_ec.c, tests/api/api.h, wolfcrypt/src/dsa.c, wolfcrypt/src/ecc.c, wolfcrypt/src/pkcs7.c, wolfcrypt/test/test.c: * remove FIPS 186-5 sign-mode restrictions from WC_HASH_CUSTOM_MIN_DIGEST_SIZE. * set up WC_MIN_DIGEST_SIZE_FOR_SIGN and WC_MIN_DIGEST_SIZE_FOR_VERIFY, derived from WC_HASH_CUSTOM_MIN_DIGEST_SIZE, but enforcing FIPS 186-5 sign-mode restrictions only for WC_MIN_DIGEST_SIZE_FOR_SIGN. * replace all uses of WC_MIN_DIGEST_SIZE with WC_MIN_DIGEST_SIZE_FOR_SIGN or WC_MIN_DIGEST_SIZE_FOR_VERIFY as appropriate. Daniel Pouzzner 2026-07-07 00:15:01 -05:00
  • d7a29f58b4 wolfcrypt/src/aes.c: activate USE_INTEL_SPEEDUP when defined(USE_INTEL_SPEEDUP_FOR_AES) in the WOLFSSL_X86_64_BUILD build path too. Daniel Pouzzner 2026-07-07 00:09:38 -05:00
  • 42a9983e05 tests/api.c: appropriately pivot expected result code on minDhKeySz in test_wolfSSL_CTX_SetTmpDH_file() and test_wolfSSL_SetTmpDH_file(). Daniel Pouzzner 2026-07-07 00:08:09 -05:00
  • 0cdc7ab583 Fix whitespaces Loganaden Velvindron 2026-07-07 08:51:12 +04:00
  • e6e8d9c7e2 wolfcrypt: fix several redefinition of typedef errors. jordan 2026-07-06 23:49:14 -05:00
  • 98c48a43b7 move check earlier Loganaden Velvindron 2026-07-07 08:47:50 +04:00
  • 675d5df2cd Merge pull request #10833 from kareem-wolfssl/zd22079 David Garske 2026-07-06 17:28:22 -07:00
  • 649054f7b8 Wycheproof: fixes for various platforms Sean Parkinson 2026-07-06 20:04:54 +10:00
  • 3cc906f5d1 Rework fail cleanup (GCC-ARM) Ruby Martin 2026-07-06 15:19:34 -06:00
  • 1cad9fb5b6 IDE examples: fix ssl double-free and unsafe connd close in servers Ruby Martin 2026-07-06 14:32:10 -06:00
  • e54ef44870 Fix ssl double-free and accepted-socket leak in Azure Sphere server Ruby Martin 2026-07-06 13:34:36 -06:00
  • f5610a8a76 Jump to exit on error paths to free resources before returning Ruby Martin 2026-07-06 11:25:26 -06:00
  • 9918a1177a internal.c: extract functions to make code cleaner Sean Parkinson 2026-07-03 14:36:36 +10:00
  • 8407359792 fix ml-dsa level auto detection in no asn1 builds Emma Stensland 2026-07-06 12:10:41 -06:00
  • bcef8f4f6d Add Windows assembly files to the build Sean Parkinson 2026-06-29 11:07:30 +10:00
  • f1b700180c Merge pull request #10738 from dgarske/zd_ecc_nonblock_certchain JacobBarthelmeh 2026-07-06 14:21:08 -06:00
  • a29a882a3a Rust wrapper: wolfssl-wolfcrypt v2.1.0 Josh Holtrop 2026-07-06 12:07:39 -04:00
  • 19f6f01c61 Rust wrapper: update CHANGELOG for v2.1.0 Josh Holtrop 2026-07-06 12:05:45 -04:00
  • 0a85d07ab3 Rust wrapper: update crate dependencies Josh Holtrop 2026-07-06 12:03:14 -04:00
  • e79c581105 Merge pull request #10712 from kareem-wolfssl/gh10679 David Garske 2026-07-06 08:16:17 -07:00
  • b560973780 Merge pull request #10825 from SparkiDev/aes_x64_perf_1 David Garske 2026-07-06 08:04:19 -07:00
  • 954c342c53 trailing whitespace Hideki Miyazaki 2026-07-05 12:09:47 +09:00
  • a53c660be9 ignore mot post-fix Hideki Miyazaki 2026-07-04 08:24:25 +09:00
  • 0910472a34 addressed review comments Hideki Miyazaki 2026-07-03 18:41:59 +09:00
  • 38a4143a48 Merge pull request #10843 from Frauschi/test_fix Daniel Pouzzner 2026-07-03 02:20:23 -05:00
  • d40aeeabc0 Fix ret check in test.c Tobias Frauenschläger 2026-07-03 09:15:26 +02:00
  • d4762ef138 addressed review comments Hideki Miyazaki 2026-07-03 15:30:26 +09:00
  • 326f40d032 Merge pull request #10626 from mattia-moffa/20260605-dtls-cid-check-newest Daniel Pouzzner 2026-07-03 01:18:38 -05:00
  • 8c7ab8eb4f Merge pull request #10686 from Frauschi/openssl_group_align Daniel Pouzzner 2026-07-03 01:17:33 -05:00
  • a543bc4d78 Merge pull request #10745 from Frauschi/mandatory_psk Daniel Pouzzner 2026-07-03 01:16:45 -05:00
  • 8847cf2aa4 Merge pull request #10768 from Frauschi/altNames_API Daniel Pouzzner 2026-07-03 01:14:57 -05:00
  • f22ec4ccae Merge pull request #10804 from Frauschi/pkcs7_no_eContent Daniel Pouzzner 2026-07-03 01:14:05 -05:00
  • cce3f2571e Merge pull request #10803 from Frauschi/fenrir Daniel Pouzzner 2026-07-03 01:11:03 -05:00
  • d638d2afd7 Merge pull request #10209 from ColtonWilley/harden-chain-depth-and-parser-bounds Daniel Pouzzner 2026-07-03 01:03:36 -05:00
  • dc326f8c70 Merge pull request #10691 from julek-wolfssl/tls13-fragmented-sessionticket-defrag Daniel Pouzzner 2026-07-03 00:50:10 -05:00
  • ec37935a1f Merge pull request #10697 from Frauschi/zd21977 Daniel Pouzzner 2026-07-03 00:47:57 -05:00
  • 3c72ada3b1 Merge pull request #10711 from kareem-wolfssl/zd21987 Daniel Pouzzner 2026-07-03 00:47:08 -05:00
  • 460b7ad041 Merge pull request #10742 from tjko/rpi_compile Daniel Pouzzner 2026-07-03 00:45:19 -05:00
  • 47b7d6ff04 Merge pull request #10739 from JacobBarthelmeh/test Daniel Pouzzner 2026-07-03 00:44:29 -05:00
  • f5538d9ba4 Merge pull request #10758 from julek-wolfssl/fix-ocsp-stapling-tls13multi-wait-timeout Daniel Pouzzner 2026-07-03 00:43:55 -05:00
  • 27e160fa53 Merge pull request #10764 from embhorn/gh10761 Daniel Pouzzner 2026-07-03 00:41:35 -05:00
  • 55c2bc5271 fix tsip hashinit return value(f6162) Hideki Miyazaki 2026-06-26 06:15:28 +09:00
  • 3a6717e7c2 AES Intel x64: improve performance Sean Parkinson 2026-07-01 14:23:10 +10:00
  • be445e1382 Fix typo on macro name Koji Takeda 2026-07-03 10:00:57 +09:00
  • fd8772ac3f quic: Fix buffer underflow Loganaden Velvindron 2026-07-03 03:57:58 +04:00
  • 0ecc0c5973 Merge pull request #10828 from SparkiDev/sp_func_block_comment_1 David Garske 2026-07-02 15:53:03 -07:00
  • bd4c11aec4 Expand test_wolfSSL_CertManagerNameConstraint_DNS_CN with non-dNSName SAN cases update comments Ruby Martin 2026-07-02 11:43:19 -06:00
  • 9d3152cae2 Merge pull request #10708 from rlm2002/support-fixes Daniel Pouzzner 2026-07-02 12:51:11 -05:00
  • 9a0a01ae87 Apply Subject CN dNSName name-constraint check unless a dNSName SAN is present. A non-dNSName SAN will not skip the CN dNSName name-constraint check now Ruby Martin 2026-07-02 11:14:26 -06:00
  • d390a98f64 Merge pull request #10754 from SparkiDev/arm64_asm_c_fallback David Garske 2026-07-02 09:30:19 -07:00
  • 79b30aa268 Enable support for mandatory PSKs Tobias Frauenschläger 2026-06-22 12:18:05 +02:00
  • e1b394afcf Fix invalid casts on ML-DSA Koji Takeda 2026-06-30 18:59:16 +09:00
  • 11f71108ba PKCS#7: support SignedData with absent eContent Tobias Frauenschläger 2026-06-29 13:26:04 +02:00
  • bf985f1d21 NewConnectionId: reject CID larger than DTLS_CID_MAX_SIZE Mattia Moffa 2026-07-02 14:16:25 +02:00
  • 154f2e2ea4 F-6547 - Reject TLS KeyUpdate on QUIC connections Tobias Frauenschläger 2026-06-29 13:14:24 +02:00
  • e8865748f2 F-6351 - Fix use after free in wolfSSL_ASN1_STRING_set self-alias Tobias Frauenschläger 2026-06-29 11:47:47 +02:00
  • 3c5ae182a6 F-6350 - Cap d2i_ASN1_OBJECT parse window to OID size Tobias Frauenschläger 2026-06-29 11:28:31 +02:00
  • d88ac76fda F-6347 - Reject negative and oversized length in EVP_EncodeUpdate Tobias Frauenschläger 2026-06-29 10:56:36 +02:00
  • 2943ee6a69 F-6346 - Reject oversized length in EVP_EncodeBlock Tobias Frauenschläger 2026-06-29 10:26:23 +02:00
  • 845a3a93b5 F-6345 - Reject oversized length in memory BIO write Tobias Frauenschläger 2026-06-29 10:11:34 +02:00
  • 7562ae5e37 F-6427 - Reject RC2 cipher ops when no key is set Tobias Frauenschläger 2026-06-29 09:14:51 +02:00
  • 5cf136d15a F-6426 - Reject Camellia cipher ops when no key is set Tobias Frauenschläger 2026-06-29 09:02:39 +02:00
  • 4de819075f Merge pull request #10835 from yosuke-wolfssl/fix/cert Tobias Frauenschläger 2026-07-02 11:34:59 +02:00
  • 3b21af4277 Invalidate record size cache when changing connection IDs Mattia Moffa 2026-07-02 05:54:03 +02:00
  • b87edc2040 certs: re-sign orphaned rsapss/mldsa leaves and add chain guard Yosuke Shimizu 2026-07-02 10:19:35 +09:00
  • 6e6d7ab619 Add an upper bound on sendAckList in Dtls13DoScheduledWork. Kareem 2026-07-01 15:01:46 -07:00
  • eb7ebfa222 Validate IV length in the non-streaming path in wc_PKCS7_DecodeEnvelopedData. Kareem 2026-07-01 14:32:58 -07:00
  • 6409a9e9a2 Fix two issues with the authTag length in wc_PKCS7_DecodeAuthEnvelopedData. Kareem 2026-07-01 14:10:58 -07:00
  • 584a11e8e8 Fixing CMAC CVE-2026-5477 and stricter CCM input validation Lealem Amedie 2026-06-24 08:47:27 -06:00
  • 4ce79f1322 CI: unify repeated flags using existing python script Paul Adelsbach 2026-07-01 12:51:13 -07:00
  • 9514b21133 Cap session ticket lifetime hint at half of key lifetime Mattia Moffa 2026-06-30 16:05:22 +02:00
  • 9104a0d2d7 SP: fix function block comments Sean Parkinson 2026-07-01 19:32:17 +10:00
  • 6315f95378 Aarch64 asm: Have software fallback and CPU id checks Sean Parkinson 2026-06-15 13:07:24 +10:00
  • 9a4b5f02c9 asn: add public alt-name list APIs Tobias Frauenschläger 2026-06-24 14:30:53 +02:00
  • 387689ca4a - add TLS 1.2 negative test that a client rejects a DHE-RSA ServerKeyExchange with tampered signed parameters (VERIFY_SIGN_ERROR), covering the rsa_sa_algo signature-content binding in DoServerKeyExchange. Structured the test following test_tls12_certreq_odd_sigalgs structure. - add TLS 1.2 negative test that a server rejects a mutual-auth DHE-RSA CertificateVerify whose signed transcript was tampered (VERIFY_CERT_ERROR, peerAuthGood stays 0), covering the rsa_sa_algo signature-content binding in DoCertificateVerify. Reda Chouk 2026-06-23 13:26:25 +02:00
  • f6ade4ebfb update description of ML-KEM AVX2 issue JacobBarthelmeh 2026-06-26 10:42:22 -06:00
  • 85bb45118d Code review feedback: reject additional shell metacharacters. Kareem 2026-06-26 07:04:52 -07:00
  • 414c0dec92 Error or warn users trying to build SP math assembly for MinGW as this is currently unsupported and will fail. Fixes #10690. Kareem 2026-06-16 17:12:07 -07:00
  • a8c4613161 Enable curve25519 support in lighttpd builds by default to enable PQC by default in lighttpd. Fixes #10679. Kareem 2026-06-16 16:58:52 -07:00